CVE-2023-29486

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1333

Affected software

No affected versions have been published.

Timeline

Published: Dec 21, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-294879.1An issue was discovered in Heimdal Thor agent versions 3.4.2 and before on Windows and 2.6.9 and before on macOS, allows attackers to cause CVE-2023-294896.1An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The CVE-2023-29496.1Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.1.CVE-2023-294917.8ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malfor CVE-2023-294929.8Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This doe CVE-2023-294946.7Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege CVE-2023-294957.8Improper input validation for some Intel NUC BIOS firmware before version IN0048 may allow a privileged user to potentially enable escalatio CVE-2023-294973.3A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to acces CVE-2023-294985.5Improper restriction of XML external entity reference (XXE) vulnerability exists in FRENIC RHC Loader v1.1.0.3 and earlier. If a user opens CVE-2023-294997.5A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of se CVE-2023-29508.1Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1.CVE-2023-295004.4Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially